This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json) Hash identifier: /BAP0TQq/woRSLGtR5rRqjXPVOVrnYFGPsgG704Cjf8= Subject key identifier: E1:36:23:84:B2:26:93:A4:17:40:E6:B0:76:8E:B6:02:1D:1A:47:8B Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed Certificate serial: 019AF19AF055AE8DC9248A59956415EF62F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft Manifest number: 1309 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: ZVv15OjhwmrQZlOqUYedwoCNap0v+2rEdCmUnRo2PMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f0:55:ae:8d:c9:24:8a:59:95:64:15:ef:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=e1362384b22693a41740e6b0768eb6021d1a478b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:ab:60:47:e7:5c:ac:98:3d:79:55:0c:de: b1:38:fc:27:b0:b1:ac:44:91:de:c6:fc:33:be:01: 5a:6e:ef:d5:b3:23:e4:aa:a8:36:d4:7c:10:bc:7f: ee:ac:25:ea:44:43:51:f6:c9:b0:64:7e:f7:3c:b4: f2:9c:b9:9b:9f:d0:41:9d:2a:d1:43:e4:1a:1b:7f: 1a:0b:e5:35:ad:f9:62:9e:78:b4:9f:82:3e:ef:55: f4:d9:1b:ea:bb:fd:77:06:a5:b4:12:b7:12:b0:15: a4:84:56:1f:ae:bb:80:47:b2:26:c6:18:4c:5b:fb: 46:f6:ac:a3:00:22:d6:d8:a6:74:6c:22:dc:8a:8f: 51:4d:5c:d4:fd:53:6f:32:7a:36:64:8c:1b:b6:66: 85:2c:fb:7e:81:be:22:77:dd:40:b2:b2:8c:05:88: 06:ab:0b:3e:2b:6e:9c:e5:fd:af:f3:8d:0c:cf:25: dc:85:44:53:6c:90:09:d3:c8:e0:82:a1:a7:6f:de: 66:65:18:d4:d9:10:7e:fa:2d:4a:1c:31:57:f9:a7: 99:7c:28:3d:c1:c8:7c:1a:38:e6:94:35:4c:ab:cd: 39:d5:d4:84:4b:37:2a:04:54:f5:a2:a4:a1:40:c5: 26:73:69:8a:88:36:da:6e:32:21:3e:fc:9b:f3:ac: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:36:23:84:B2:26:93:A4:17:40:E6:B0:76:8E:B6:02:1D:1A:47:8B X509v3 Authority Key Identifier: keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4b:61:eb:da:51:9a:6d:ff:da:f2:10:8b:d1:08:68:47:e4: 0d:0e:e8:1d:6b:37:1b:5e:1b:20:ad:01:5a:d9:56:70:97:c0: 6d:a9:57:d4:58:94:cf:b7:f0:dc:27:f4:31:c7:1d:e4:eb:27: e1:72:3c:20:8b:4e:32:38:41:12:e7:d6:dc:6a:b7:51:46:fc: 39:c9:6e:2c:9e:d3:e7:d0:3d:49:f3:c9:14:cf:e4:59:ae:7e: ec:16:29:6e:e4:e0:77:30:c8:cb:c4:ed:96:54:66:95:52:36: 73:f7:10:96:33:db:4e:e3:b4:c7:7d:d3:35:c4:52:fb:c8:20: a8:e5:ed:72:d8:54:ae:4f:ed:21:a5:66:5f:c0:40:a6:19:f1: 00:2f:d5:c6:eb:9a:ce:98:ee:ee:19:58:5f:6f:15:17:3c:cc: d0:98:76:f4:2b:97:1e:ed:d6:b4:41:6d:2a:2c:3a:ed:f3:ce: 85:1c:cf:84:86:7d:97:86:e0:3b:b9:07:fd:5b:68:9b:b9:3f: 61:73:d1:f5:dc:88:3b:0f:e2:3a:1e:41:d9:26:2d:6a:3e:3d: f0:61:49:18:48:b5:17:38:35:45:b8:0a:74:9e:22:62:cd:36: 2e:10:94:c9:ed:c2:40:fe:af:73:50:c9:c4:52:fd:da:a1:8d: dc:43:97:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvBVro3JJIpZlWQV72LwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyY2I4YzEyMzNiMDE2YjFmMDQ4MTA4OTczZDZhYzNlNzYy ZjYzZWQwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EyhlMTM2MjM4NGIyMjY5M2E0MTc0MGU2YjA3NjhlYjYwMjFkMWE0NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F+rYEfnXKyYPXlVDN6xOPwnsLGs RJHexvwzvgFabu/VsyPkqqg21HwQvH/urCXqRENR9smwZH73PLTynLmbn9BBnSrR Q+QaG38aC+U1rflinni0n4I+71X02Rvqu/13BqW0ErcSsBWkhFYfrruAR7ImxhhM W/tG9qyjACLW2KZ0bCLcio9RTVzU/VNvMno2ZIwbtmaFLPt+gb4id91AsrKMBYgG qws+K26c5f2v840MzyXchURTbJAJ08jggqGnb95mZRjU2RB++i1KHDFX+aeZfCg9 wch8GjjmlDVMq8051dSESzcqBFT1oqShQMUmc2mKiDbabjIhPvyb86zhCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE2I4SyJpOkF0DmsHaOtgIdGkeLMB8GA1UdIwQY MBaAFGLLjBIzsBax8EgQiXPWrD52L2PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2Et M2NhMmY3OTZiNTk2LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2EtM2NhMmY3OTZiNTk2 LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0th69pR mm3/2vIQi9EIaEfkDQ7oHWs3G14bIK0BWtlWcJfAbalX1FiUz7fw3Cf0Mccd5Osn 4XI8IItOMjhBEufW3Gq3UUb8OcluLJ7T59A9SfPJFM/kWa5+7BYpbuTgdzDIy8Tt llRmlVI2c/cQljPbTuO0x33TNcRS+8ggqOXtcthUrk/tIaVmX8BAphnxAC/Vxuua zpju7hlYX28VFzzM0Jh29CuXHu3WtEFtKiw67fPOhRzPhIZ9l4bgO7kH/Vtom7k/ YXPR9dyIOw/iOh5B2SYtaj498GFJGEi1Fzg1RbgKdJ4iYs02LhCUye3CQP6vc1DJ xFL92qGN3EOXeA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:04 2025 by rpki-client